Results 1 to 5 of 5
  1. #1
    aeronyx's Avatar
    Join Date
    Jul 2010
    Gender
    male
    Location
    /210/
    Posts
    11,238
    Reputation
    1211
    Thanks
    5,070

    What do you know about...

    MD5 spoofing?

    If you've heard, as of recently, Nexon has 'patched' REZ modding for Combat Arms with a MD5 Hash check on the game files.

    When you mod a file, its hash changes, etc, so I want to know about modifying a file's MD5 hash/checksum to bypass this.

    :x

    /discuss

  2. #2
    -Raz0r-'s Avatar
    Join Date
    Aug 2010
    Gender
    male
    Location
    Australia
    Posts
    117
    Reputation
    15
    Thanks
    38
    My Mood
    Lurking
    The MD5 hash will be calculated at runtime. It's not stored inside the file itself.
    You'll have to modify the process that calculates the hash to bypass the check. Either return a false hash, or skip the verification routine altogether. I don't know how possible this will be, I'm not familiar with Nexon or CA.

    An unrealistic approach would be to find a hash collision, but this will prove to be much more work than the benefit.
    Languages: C, C++, x86 ASM, PHP, Lua

  3. #3
    Jason's Avatar
    Join Date
    Apr 2010
    Gender
    male
    Location
    /dev/null
    Posts
    5,704
    Reputation
    918
    Thanks
    7,676
    My Mood
    Mellow
    Finding a collision isn't a solution to the problem at all. Unless by some 1/100000000000000000000000000 chance the modifications you make when modding SOMEHOW collide with what the original file's MD5 was, otherwise it's useless. The only sensible way would be to hook/patch the verification method and just return true all the time.

    Quote Originally Posted by Jeremy S. Anderson
    There are only two things to come out of Berkley, Unix and LSD,
    and I don’t think this is a coincidence
    You can win the rat race,
    But you're still nothing but a fucking RAT.


    ++Latest Projects++
    [Open Source] Injection Library
    Simple PE Cipher
    FilthyHooker - Simple Hooking Class
    CLR Injector - Inject .NET dlls with ease
    Simple Injection - An in-depth look
    MPGH's .NET SDK
    eJect - Simple Injector
    Basic PE Explorer (BETA)

  4. #4
    .::SCHiM::.'s Avatar
    Join Date
    Sep 2010
    Gender
    male
    Posts
    733
    Reputation
    180
    Thanks
    880
    My Mood
    Twisted
    You can't 'spoof' md5, integrity is one of the reasons md5 exists at all. Hash collisions are of no use, they are only useful when you want to bypass password checks. As everyone here suggested, hook the verify function. Or inject your maps at runtime.

    I'm SCHiM

    Morals derive from the instinct to survive. Moral behavior is survival behavior above the individual level.

    Polymorphic engine
    Interprocess callback class
    SIN
    Infinite-precision arithmetic
    Hooking dynamic linkage
    (sloppy)Kernel mode Disassembler!!!

    Semi debugger




  5. #5
    Hell_Demon's Avatar
    Join Date
    Mar 2008
    Gender
    male
    Location
    I love causing havoc
    Posts
    3,976
    Reputation
    343
    Thanks
    4,320
    My Mood
    Cheeky
    Make a copy of the original files in a folder named Original > Redirect all open/read/write calls to the original files > profit.
    Ah we-a blaze the fyah, make it bun dem!

Similar Threads

  1. what do you think about MPGH community
    By Leaum in forum General
    Replies: 24
    Last Post: 03-01-2010, 10:31 AM
  2. what do you think about MPGH.NET?
    By crazy-tatar in forum Combat Arms Europe Hacks
    Replies: 24
    Last Post: 03-09-2009, 02:23 PM
  3. What Do You Thik About Spy Hunt?
    By goldwinds in forum Combat Arms Hacks & Cheats
    Replies: 1
    Last Post: 12-19-2008, 09:21 PM
  4. what do you think about MPGH community
    By Leaum in forum General
    Replies: 2
    Last Post: 10-25-2008, 02:32 AM
  5. What you know about math?
    By arunforce in forum General
    Replies: 2
    Last Post: 04-07-2007, 07:47 AM